June 30, 2008 For Windows operating systems 2000, XP and Vista You have a malware infection on your PC and you are unsure how to begin removing it? Before requesting a Hijackthis (HJT) log analysis, perform the steps below. This will ensure the cleanest possible log for www.computing.net contributors to work with and allow you to begin the malware removal process immediately. Here there are detailed step-by-step instructions designed for the everyday PC user. The instructions have been compiled from previous input of successfully given advice from various www.computing.net contributors. All of the recommended programs are entirely free for home PC users. Step 1 If you already have Ccleaner or ATF Cleaner installed please run it and proceed to Step 2 Clean the PC of all cache and temporary files. Click here to to start ATF Cleaner download Double-click ATF-Cleaner.exe to run the program. Under Main "Select Files to Delete" choose: Select All. Click the Empty Selected button. If you use Firefox browser: Click Firefox at the top and choose: Select All Click the Empty Selected button. NOTE: If you would like to keep your saved passwords, please click No at the prompt. If you use Opera browser: Click Opera at the top and choose: Select All Click the Empty Selected button. NOTE: If you would like to keep your saved passwords, please click No at the prompt. Click Exit on the Main menu to close the program. Step 2 Run these Anti-malware applications Download Malware Bytes AntiMalware (MBAM) to your desktop. Click here to start MBAM download Once downloaded close all windows (including this one) and double click the file on your desktop Download_mbam-setup.exe During the installation leave the options to Launch and Update checked. When the installation has finished MBAM will open, perform the complete scan. Remove everything it finds. Download SUPERAntispyware free edition to your desktop, install then update. Click here to go to SUPERAntispyware download location Once the updates have finished click on the "Scan your computer button", ensure "perform complete scan" radio button is selected and click "next". Remove everything it finds. Step 3 Get a second opinion on the health of your PC Below are links to free online Antivirus scanners. They may require that you install an ActiveX component and / or disable your current Antivirus program. These are trusted sites. Avoid any other online or general PC usage whilst running these scans. Click here to go to the Kaspersky Online Virus Scanner page Very comprehensive scan. Will produce a report. Malware removal not supported. Click here to go to BitDefender Online Scanner location Scans and attempts Malware removal Step 3 Prepare a HijackThis (HJT) logfile If you find that you still need assistance in malware removal or suspect malware is still active on your pc, you can prepare a HJT log for review. PLEASE TAKE NOTE: HJT logs are NOT permitted on www.computing.net without prior request. Any HJT submission without prior approval may result in the post or entire thread being removed. Download HijackThis to your desktop Click here to download the HiJackthis installer 1. Save " HJTInstall.exe" to your desktop. 2. Double click on HJTInstall.exe to run the program. 3. By default it will install to C:\Program Files\Trend Micro\HijackThis. 4. Accept the license agreement by clicking the "I Accept" button. 5. Click on the "Do a system scan and save a log file" button. It will scan and then ask you to save the log. 6. Once the scan is complete a notepad document will appear on the desktop. 7. Copy and paste the contents of the entire Hijackthis Log log back here in your next reply. 8. Do NOT have HijackThis fix anything yet! Most of what it finds will be harmless or even required.